Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20313336373837.roa
File: 33312e3138372e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ZxSQVvB2N/u3vtcjGJRXCyhkwcbD0fEmEvjRI22gBGg=
Subject key identifier: 5E:A1:A4:87:40:10:8A:8E:D9:AA:FF:D6:00:C5:FB:B0:78:CA:D2:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 50CC31AE2CA6B1E43A2B5FC6BBC2413506AEE7AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:13 +0000
ROA not before: Mon 26 Feb 2024 08:48:13 +0000
ROA not after: Mon 24 Feb 2025 08:53:13 +0000
asID: 136787
IP address blocks: 31.187.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 12:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:cc:31:ae:2c:a6:b1:e4:3a:2b:5f:c6:bb:c2:41:35:06:ae:e7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:13 2024 GMT
Not After : Feb 24 08:53:13 2025 GMT
Subject: CN=5EA1A48740108A8ED9AAFFD600C5FBB078CAD20E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:a3:16:2c:f0:9a:61:c3:b3:ad:cb:7c:05:
ec:e8:81:54:2e:bc:29:9f:bf:29:42:0e:92:c9:4a:
1b:0f:5a:56:f9:ec:e6:06:bf:0b:a7:cb:13:58:3b:
fe:c2:71:88:b3:86:9f:6c:71:a9:a2:15:75:1c:d2:
8e:2e:7e:84:b5:69:3c:e7:ff:83:cc:af:f4:11:52:
34:d7:d1:64:52:e8:51:a4:6b:b5:cf:3b:aa:e6:f9:
67:2d:0f:ad:19:1a:fd:9e:a5:87:71:56:98:2a:55:
18:f8:6e:0b:45:47:f3:92:c8:de:36:a2:c1:49:33:
6f:14:f7:61:d8:ba:c9:6d:48:4c:1b:13:d6:ff:a9:
73:f2:5f:7b:71:92:20:d2:e2:72:f4:00:dd:2a:12:
f9:be:76:d7:91:fd:39:4a:8d:3c:af:6d:f7:73:ae:
16:73:4b:13:5a:cb:0b:a4:3b:de:bd:ac:16:b9:b4:
11:29:0c:b0:5d:0e:ca:d1:16:ef:5e:7b:62:35:7f:
5c:bb:2b:53:bc:5d:d4:af:4b:86:ff:20:10:93:fe:
67:45:8d:a2:3a:71:34:df:60:cc:14:30:fb:a1:e0:
96:e8:31:49:84:79:46:43:4c:67:de:a2:3c:f9:68:
61:00:59:63:d7:44:5c:85:5f:03:8f:18:e1:6a:af:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:A4:87:40:10:8A:8E:D9:AA:FF:D6:00:C5:FB:B0:78:CA:D2:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.73.0/24
Signature Algorithm: sha256WithRSAEncryption
67:18:fd:05:9a:e3:fd:46:8a:75:2e:c8:ee:58:35:1b:84:a0:
62:82:1d:e0:ed:85:db:d0:a3:d8:b0:f3:47:36:2b:0f:91:49:
fd:c2:43:6f:ac:78:78:63:04:d0:19:9d:91:db:06:ca:ca:c5:
3c:e5:2b:e9:55:67:65:49:69:20:e5:03:1e:55:72:a1:99:eb:
29:8f:1d:14:b9:22:2c:b9:7d:2e:f1:9a:fc:48:da:f3:3d:fc:
ca:cd:1c:58:a5:29:3c:aa:3d:1e:fe:13:bb:a1:d9:dd:f0:7e:
09:1d:68:37:6c:84:07:c9:37:17:ed:40:52:54:e2:78:60:d0:
5f:77:36:d5:7d:dd:6b:26:ba:04:36:b5:f2:a0:da:4b:c7:52:
08:4a:0f:ee:0f:45:00:e5:68:83:b7:b1:c1:4e:11:94:3a:95:
35:cd:24:f0:1c:7d:18:b1:5d:4b:1f:43:00:45:66:30:50:99:
06:06:44:c2:83:08:fc:71:02:20:cb:78:fd:61:50:fb:b2:cc:
47:fa:f5:91:9d:32:74:5e:46:c6:69:c0:2f:57:99:74:78:c4:
7d:5e:aa:13:5b:6b:55:81:1e:d8:04:d7:34:6a:31:24:05:02:
92:9b:e0:00:5d:21:fc:52:3f:e7:4a:11:45:10:1d:2c:c8:cb:
e9:9d:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:25 2025 by rpki-client